Our install is a 60 day trial running on a VM. I'm trying to get it integrate with our AD to import users.
I've verified that everything works without using TLS or SSL, but I'm running into the following error when trying to connect with TLS:
Unable to authenticate: TLS error -8179:Peer's Certificate issuer is not recognized.
Is this saying that the AD Peer is the issue? or is the NagiosXI system the issue?
I've run through the steps in the following doc: https://assets.nagios.com/downloads/nag ... ponent.pdf but that doesn't seem to make a difference.
Any help would be appreciated.
TLS Issues with Active Directory Integration
Re: TLS Issues with Active Directory Integration
Is the remote server using a self signed SSL certificate, or an external certificate?
Have you imported it into your server?
Have you imported it into your server?
Former Nagios Employee
Re: TLS Issues with Active Directory Integration
I've tried to import it via the steps from the PDF. It looks to be a certificate signed by one of the domain controllers.
I'm out at training this week so I haven't been able to dig into this further today.
I'm out at training this week so I haven't been able to dig into this further today.
Re: TLS Issues with Active Directory Integration
You may need to import the root certificate as well.
I'll leave this thread open for now, update us once you have a chance to look at it.
I'll leave this thread open for now, update us once you have a chance to look at it.
Former Nagios Employee
Re: TLS Issues with Active Directory Integration
I was able to sort it out. Importing the root certs did the trick, I hadn't realized that was possible through the XI interface and had been trying to do it on the backend.
Re: TLS Issues with Active Directory Integration
Ah, nice! Glad to see importing the root certificate worked.
I'll go ahead and close this thread out, but if you ever need assistance in the future feel free to open a new one.
I'll go ahead and close this thread out, but if you ever need assistance in the future feel free to open a new one.
Former Nagios Employee